LEGACY MODERNIZATION
Leave COBOL behind. Check that the results stay the same.
01 — THE RISK
A translated program can compile, pass its tests and still compute a different amount on the one input nobody tried.
02 — WHAT IRONPROOF DOES
Ironproof translates COBOL into Python, then checks that both give the same results, or shows the exact input where they differ. What our model of the old system does not cover is marked as not covered, never as passed.
03 — WHAT YOU RECEIVE
Three verdicts. Each one ships with its verification dossier.
Never a green checkmark. Every result is one of three, and each comes with what was used to reach it.
Proven.
The property holds within the stated model and its assumptions.
You get the obligation — SMT-LIB for policy proofs, the harness and its bounds for C — to re-run yourself.
Refuted.
A concrete counterexample shows exactly how it breaks.
You get the counterexample, to replay yourself.
Not demonstrated.
We could not conclude. Said as such, never shown as a pass.
You get the reason it stopped, recorded with the result.
04 — TODAY
IBM’s GenApp sample insurance programs, checked under a CICS model we write ourselves. No outside party has replayed it yet.
Others sell trust.
We sell the right not to trust us.

Bring one case. Leave with the evidence.
Tell us what you need checked. We answer with what we can prove, and what we cannot.
ALL THREE APPLICATIONS